CVE-2026-85517: Information Disclosure in code-projects Vehicle Management System

An information disclosure vulnerability (CVE-2026-85517) affects code-projects Vehicle Management System 1.0. The issue resides in an unspecified function of the /vehicle_management.sql file within the SQL Database Backup File Handler component. An attacker can remotely trigger this flaw without privileges or user interaction, potentially exposing sensitive information. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. Exploit code is publicly available, but no confirmed active exploitation has been reported. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of information from the Vehicle Management System's SQL database backup handler. This could expose sensitive data to remote attackers without requiring authentication or user interaction. However, there is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting remote access to the affected system and monitoring for suspicious activity related to the SQL Database Backup File Handler. Avoid exposing the vulnerable component to untrusted networks.